Critical · 9.8 CVE-2021-24007 EUVD-2021-10927GHSA-98vw-7jjm-r328

Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticate…

Published Jul 9, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiMail Category: Network devices

Description

Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

Affected products

Vendor	Product	Affected	Fixed
Fortinet	Fortinet FortiMail	FortiMail before 6.4.4	—

References

https://fortiguard.com/advisory/FG-IR-21-012